Clusterfuzz

Explore Chrome's open-source distributed fuzzer, Clusterfuzz, in this 32-minute conference talk from nullcon Goa 2015. Gain insights into how Clusterfuzz utilizes over 3000 cores to fuzz Chrome across various platforms, discovering security vulnerabilities in real-time with reproducible test cases. Delve into detailed statistics on bug types found in Chrome and learn about the challenges of distributed fuzzing. Discover how to run your own fuzzers on the Clusterfuzz infrastructure and potentially earn Chrome bounties for uncovered bugs. The presentation covers Clusterfuzz's architectural overview, crash automation and management, fuzzer types and examples, code coverage analysis, memory debugging tools, and the process of reproducing and minimizing test cases. Additionally, learn about real-time regression fixes and the Findit tool for identifying culprit CLs.